CVE-2025-62045

Name of the Vulnerable Software and Affected Versions TheGem Theme Elements (for WPBakery) versions prior to 5.10.5.2

Description The plugin contains a Local File Inclusion flaw, which occurs when a program includes a file without properly validating the filename. This allows unauthenticated attackers to include and execute arbitrary files on the server, potentially leading to the execution of PHP code. This flaw can be leveraged to bypass access controls or obtain sensitive data, particularly when images or other safe file types are uploaded and subsequently included.

Recommendations Update TheGem Theme Elements (for WPBakery) to a version newer than 5.10.5.1.